Github user mmiklavc commented on the issue:

    https://github.com/apache/incubator-metron/pull/364
  
    Some notes for completely removing Metron in the event of a botched install:
    
    ```
    Uninstall metron
    ---------------
    # stop sensors
    service yaf stop && service pcap-replay stop && /usr/local/bro/bin/broctl 
stop && service snortd stop
    # kill topologies
    for i in snort yaf bro enrichment indexing; do storm kill $i; done
    # enable kafka topic delete - in the Kafka config for your kafka-brokers, 
set delete.topic.enable=true (otherwise the topics will just sit around)
    # delete topics
    for i in snort bro yaf enrichments indexing; do ./kafka-topics.sh 
--zookeeper amb1.service.consul:2181 --delete --topic $i; done
    # Remove hbase tables
    $ hbase shell
        disable 'enrichment'
        disable 'threatintel'
        drop 'enrichment'
        drop 'threatintel'
    # cleanup install:
    yum -y erase mysql metron* && rm -rf /usr/metron && rm -fr /var/cache/yum/* 
&& yum clean all
    ```


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

Reply via email to